Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/26027484-7307-388b-9fc5-8d20f7d065ba.roa
File:                     26027484-7307-388b-9fc5-8d20f7d065ba.roa (raw, json)
Hash identifier:          e4y1yKbxeMQtLwk3WZHi5QLnPCbrYyWrMRl15jUZBdY=
Subject key identifier:   95:31:1F:27:6D:B0:65:DC:1D:B2:55:1B:E4:A8:81:6F:7D:A9:93:15
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16D7F88BCAD
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/26027484-7307-388b-9fc5-8d20f7d065ba.roa
Signing time:             Mon 30 Sep 2019 00:18:50 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     30103
IP address blocks:        165.254.88.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:7f:88:bc:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=4a401a2e-ad14-4377-8c4b-9bd94b25ea84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:07:94:5e:d0:d5:53:a0:9f:2e:38:da:8b:45:
                    da:fd:35:3a:86:d8:ed:65:b9:8b:4c:65:de:1c:6d:
                    e6:8e:9a:a5:9e:21:a5:4a:a8:83:6c:0c:91:97:29:
                    3f:b2:51:23:00:ac:ef:94:01:31:2d:6c:12:c0:b5:
                    21:07:ba:ca:73:73:4b:26:8d:79:32:a8:78:ab:60:
                    43:73:10:18:f8:c9:ff:2a:e2:a3:8f:c9:56:a8:c1:
                    9f:2d:31:da:28:81:d8:93:20:d7:8e:cc:03:ed:dd:
                    bd:5e:e4:ff:ce:fe:8b:d0:59:cf:f4:a7:5a:cd:d6:
                    04:d2:8c:d9:22:84:fc:a4:e4:01:bf:c3:cb:a2:a5:
                    f5:f9:be:2e:ff:cf:0f:f0:ce:f3:b2:ad:44:35:f6:
                    b6:ec:02:c6:c9:d9:46:44:44:ac:fe:ea:cd:68:ea:
                    3c:b1:b8:c5:58:65:f4:e5:5a:b5:0b:bc:48:29:52:
                    0a:e0:35:57:e8:70:ce:e0:c5:c1:d5:77:89:3c:c3:
                    3f:d7:14:94:a4:be:06:1f:a2:58:7e:6c:86:8e:09:
                    23:ae:97:89:f6:e3:db:bb:cd:b4:58:78:c8:ec:47:
                    cd:0c:15:c1:1f:3c:35:e9:6d:f1:5b:b4:31:bd:b1:
                    bb:62:9a:44:ae:83:15:67:a8:30:d6:35:87:5f:a3:
                    e9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:31:1F:27:6D:B0:65:DC:1D:B2:55:1B:E4:A8:81:6F:7D:A9:93:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/26027484-7307-388b-9fc5-8d20f7d065ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:f1:06:2d:81:6d:9f:b1:ff:32:7c:c8:69:f3:2b:2c:5b:82:
         fe:27:27:ce:66:fe:61:ee:d4:45:17:da:92:c9:27:0a:72:3d:
         51:b6:c1:f4:63:93:06:b4:84:ad:5b:f2:80:63:29:1c:fd:55:
         41:31:62:ed:3a:a3:e3:82:2e:6e:98:8a:d6:46:ce:b5:14:aa:
         b8:ee:54:57:cc:dc:7a:35:6b:87:17:87:f8:1c:5c:70:c7:96:
         b3:8c:f6:57:c9:ee:bd:32:13:46:84:10:8f:71:97:bc:4f:e8:
         39:99:d1:83:c1:ba:20:82:4c:d6:01:95:7a:c2:9a:59:fe:1f:
         b0:98:5a:ac:72:9b:fa:b7:e0:9f:82:89:93:e9:b3:a8:83:5f:
         41:86:18:7e:30:c6:62:6c:40:da:ad:7b:d7:cb:7e:06:3b:b9:
         6a:3b:ac:82:13:16:a9:6a:a6:df:08:a7:36:7d:00:98:eb:3f:
         cc:07:b9:ed:35:68:2e:22:a9:3b:73:eb:3c:32:31:96:e8:1f:
         b7:56:5f:4f:a7:0c:00:e7:f7:28:96:b7:cc:e5:b3:31:13:83:
         55:2e:1f:00:60:cb:e9:c5:cd:e3:1b:2c:fd:69:cf:2a:4b:e8:
         ae:32:a4:1d:ab:4a:f6:93:4a:76:7e:16:da:64:89:a8:d9:2b:
         c8:7d:6b:5a
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BbX+IvK0wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0ZDk3
ZjAeFw0xODA0MTAwNDAwMDBaFw0yODA0MTAwNDAwMDBaMC8xLTArBgNVBAMTJDRh
NDAxYTJlLWFkMTQtNDM3Ny04YzRiLTliZDk0YjI1ZWE4NDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALsHlF7Q1VOgny442otF2v01OobY7WW5i0xl3hxt
5o6apZ4hpUqog2wMkZcpP7JRIwCs75QBMS1sEsC1IQe6ynNzSyaNeTKoeKtgQ3MQ
GPjJ/yrio4/JVqjBny0x2iiB2JMg147MA+3dvV7k/87+i9BZz/SnWs3WBNKM2SKE
/KTkAb/Dy6Kl9fm+Lv/PD/DO87KtRDX2tuwCxsnZRkRErP7qzWjqPLG4xVhl9OVa
tQu8SClSCuA1V+hwzuDFwdV3iTzDP9cUlKS+Bh+iWH5sho4JI66Xifbj27vNtFh4
yOxHzQwVwR88Nelt8Vu0Mb2xu2KaRK6DFWeoMNY1h1+j6XUCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSVMR8nbbBl3B2yVRvkqIFvfamTFTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2Yy
M2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRkOTdmLzI2MDI3NDg0LTczMDctMzg4
Yi05ZmM1LThkMjBmN2QwNjViYS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUx
LWJlZjc2NzE0ZDk3Zi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5
N2YuY3JsMB8GA1UdIwQYMBaAFIyrXccywtjz5ZNhau64tSCy+RO6MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3
MTRkOTdmLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaX+WDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAH/EGLYFtn7H/MnzIafMrLFuC/icnzmb+Ye7URRfaksknCnI9UbbB9GOTBrSE
rVvygGMpHP1VQTFi7Tqj44IubpiK1kbOtRSquO5UV8zcejVrhxeH+BxccMeWs4z2
V8nuvTITRoQQj3GXvE/oOZnRg8G6IIJM1gGVesKaWf4fsJharHKb+rfgn4KJk+mz
qINfQYYYfjDGYmxA2q1718t+Bju5ajusghMWqWqm3winNn0AmOs/zAe57TVoLiKp
O3PrPDIxlugft1ZfT6cMAOf3KJa3zOWzMRODVS4fAGDL6cXN4xss/WnPKkvorjKk
HatK9pNKdn4W2mSJqNkryH1rWg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:28:59 2024 by rpki-client on console-fra.rpki-client.org